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Abstract 

We show that k = w + 2 mutually unbiased bases can be constructed in any square 
dimension d = s 2 provided that there are w mutually orthogonal Latin squares of order 
s. The construction combines the design-theoretic objects (k, s)-nets (which can be 
constructed from w mutually orthogonal Latin squares of order s and vice versa) and 
generalized Hadamard matrices of size s. Using known lower bounds on the asymp- 
totic growth of the number of mutually orthogonal Latin squares (based on number 
theoretic sieving techniques) , we obtain that the number of mutually unbiased bases in 
dimensions d = s 2 is greater than 5 1 / 14 - 8 for all s but finitely many exceptions. Further- 
more, our construction gives more mutually orthogonal bases in many non-prime-power 
dimensions than the construction that reduces the problem to prime power dimensions. 

1 Introduction 

Two orthonormal bases B and B' of the Hilbert space are called mutually unbiased if 
and only if 

12 = l/d 



for all \(p) £ B and all \ip) £ B' . The concept of mutually unbiased bases (MUBs) plays an 
important role in quantum information theory. For example, some quantum cryptographic 
protocols rely on the fact that no information can be obtained when a quantum system 
which is initialized in a basis state from B' is measured with respect to the basis B. The 
protocols in El El exploit this observation in order to distribute secrete keys over a public 
channel in an information-theoretic secure way. 

It is known that the cardinality of any collection of mutually unbiased bases of C d cannot 
exceed d + 1 (see ^1 El HH1 03])- Sets attaining this bound are extremely interesting 
because they allow quantum state tomography with projective measurements consisting of 
a minimal number of operators ^Sj- Furthermore, for some of these cases it is possible to 
define a discrete version of the Wigner function for states on the Hilbert space C d (see e.g. 
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|14j for an overview on this subject). An enjoyable application of mutually unbiased bases 
is the Mean King's problem [221II31I2]- 

Let NMUB(d) denote the maximum cardinality of any set containing pairwise mutually 
unbiased bases of C d . We have NMUB{d) > 3 for any dimension d (see [2]). It is known 
that Nmu b id) =d+l holds when d is a prime power [T%1 I2H 1251 131 12T] . 

An open problem is to determine NMUB(d) when the dimension is not a prime power. 
The case d = 6 is studied in ^Sj. An elementary lower bound on NMUB{d) for arbitrary d 
is derived in [25j Proposition 2.20] and [2^. Let d = p^ 1 ■ ■ -p e r r be a factorization of d into 
distinct prime powers p^. Then 

N M UB(d) > m.m{N M UB(p e i), N M ub(P2 2 ), N M UB{p e r r )} ■ (1) 

This is proved as follows. Let m := minj Nmub{pT)- Choose m mutually unbiased bases 
Bf B$ of , for all i in the range 1 < % < r. Then 

{b£ 1} ® • • ■ <8> b£° \k = l,...,m} 

is a set of m mutually unbiased bases of C d . This is easily memorable by NMUB(fn n ) > 
mm{NMUB(n), NMUBim)} for all m,n>2. In the following we will refer to this construc- 
tion as the "reduce to prime powers" construction. 

We present a construction that yields more MUBs than the "reduce to prime powers" 
construction in many non-prime-power dimensions. However, our construction always pro- 
duces less MUBs if d 2 is a prime power. More precisely, if d = p 2e for some prime number 
and e > 1 then our construction gives only p e + 1 MUBs compared to the optimal value 
N M u B (p 2e )=P 2e + l. 

Our construction combines the design-theoretic objects nets or, more precisely, their 
description by incidence vectors, and generalized Hadamard matrices. These concepts are 
briefly introduced in Section 2. The construction is presented in Section 3. In Section 4 we 
discuss briefly the equivalence of nets to other design-theoretic objects. We relate mutually 
orthogonal Latin squares and nets in more detail. This shows that there are incidence 
vectors with good parameters. In Section 5 we examine the cases where our construction 
yields more mutually orthogonal bases. 

2 The ingredients 

2.1 Incidence vectors from nets 

Our construction of mutually unbiased bases makes use of incidence vectors satisfying cer- 
tain conditions. The idea to use them is based on the observation that mutually unbiased 
bases satisfy "similar" conditions. Let 

Bx := {|^iO,hM,...,hhd>}, 
B 2 ■= {|«,|«,...,|^», 
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Bk ■= {\^ki), \1pk2), ■ ■ ■ , \^kd)} 



be a collection of k mutually unbiased bases in C . For such a collection we have 

KV^)I 2 = <% (2) 

for all 1 < b < k and all 1 < i, j 1 < d and 

\m^ 3 )\ 2 = - d (3) 

for all 1 < b < c < k and all 1 < i < j < d. 

Now we consider a collection of incidence vectors that satisfy "similar" conditions. We 
say that a (column) vector m := (m[l], . . . ,m[(i]) T of size d is an incidence vector if its 
entries take only the values and 1. The Hamming weight of m is the number of l's. The 
support supp(m) of the incidence vector m (of Hamming weight s) is the set of indices 
ji, . . . ,j s such that the corresponding entries m[ji], . . . , m[j s ] of m are all 1. We always 
sort the indices, i.e., j% < . . . < j s . 

Now we introduce the notion of nets, i.e., collections of incidence vectors satisfying 
special properties. 

Definition 1 (Net) 

Let {mil, • • • , mis, ^21, ■ ■ ■ > m2s! • • • , mfci, • • • , ^-ks} be a collection of ks incidence vectors 
of size d = s 2 that are partitioned into k blocks where each block contains s incidence 
vectors. The incidence vectors are denoted by m^, where b = 1, . . . , k identifies the block 
and i = l,...,s the vector within a block. If the incidence vectors satisfy the following 
conditions we say that they form a (k,s)-net. 

1. The supports of all vectors within one block are disjoint, i.e., 

ml m bj = (4) 
for all 1 < 6 < k and all 1 < i ^ j < s. 

2. The intersection of any incidence vectors from two different blocks contains exactly 
one element, i.e., 

m l m cj = 1 (5) 
for all 1 <b ^ c < s and all 1 <i,j < s. 

Note that our definition of (A:,s)-nets is in accordance with the usual definition of nets in 
design theory [111 page 172]. The incidence vectors are just the characteristic functions of 
the subsets used there. 
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Example 2 (Incidence vectors) 

For d = s 2 with s = 2 we have k = 3 blocks. The incidence vectors are defined in the table 
below for a (3, 2) -net: 



nin 


mi2 


m 2 i 


m-22 


m 3 i 


m 32 


1 





1 
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1 
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1 






In Section |1] we describe briefly that nets are equivalent to other combinatorial objects like 
transversal designs, mutually orthogonal Latin squares, and orthogonal arrays. Due to the 
correspondence of equations (J2J) <-> (|3J) and (JSJ «-> © one could consider mutually unbiased 
bases as the quantum generalization of nets. Indeed, this and other quantum generalizations 
of many design-theoretic objects are considered in |25| . 

2.2 Generalized Hadamard matrices 

For our construction we need to introduce generalized Hadamard matrices. We call an 
s x s-matrix H with entries from C a generalized Hadamard matrix if all its entries have 
modulus one and H satisfies HH^ = sl s . Usual Hadamard matrices have entries ±1. A 
necessary condition for the existence of (usual) Hadamard matrix is that s = 1, 2 or s is a 
multiple of 4 (see [T5|). 

Note that generalized Hadamard matrices exist for any dimension s. Just take the (not 
normalized) Fourier matrix DFT S whose entries (k, I) are given by the s-th roots of unity 

DFT$ := u kl 

where u := e 2m l s and k,l = 0, . . . , s — 1. Other examples of generalized Hadamard matri- 
ces are character tables of finite abelian groups This follows from the orthogonality 
relations of characters. 

3 Mixing the ingredients: our construction 

Now we have all ingredients we need for our construction. We just need the following 
simple definition. Let m E {0, l} d be an incidence vector of Hamming weight s and h E C s 
an arbitrary column vector. Then we define the embedding of h into C d controlled by m, 
denoted by h f m, to be the following vector in C d 

s 

h t m := ^2 h H I Or) , (6) 

r=l 

where h[r] is the rth entry of the vector h, {ji, j2 5 • • • ; js} the support of m with the ordering 
jl < 32 < ■ ■ ■ < js and \j r ) the j r th standard basis vector of C . A less formal way to define 
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this vector is: the first non-zero entry of m is replaced by the first entry of h, the second 
non-zero entry of m by the second entry of h, etc. 

This operation is best illustrated by a simple example: 



m := 



/ 1 \ 



1 







V i J 



G{0,1} 9 , h:= 



u 

, ,2 



eC 3 , htm:: 
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eC 8 



Theorem 3 (Construction of MUBs) 

Let {mn, • • • j m isi m 2ii • • • j m 2s> • ■ • j m fcii ■ j m ks} be a (k, s)-net and H an arbitrary gen- 
eralized Hadamard matrix of size s. Then the k sets for b = 1, . . . , k 



-p(hj T ra u ) | I = 1, 



,8, I 



(7) 



are k mutually orthogonal bases for the Hilbert space C d . 



Proof. All vectors h; f m^j have length y/s because all incidence vectors m^ have Hamming 
weight s. Therefore, the vectors in eq. (JJJ) are normalized. 

Let us now consider one fixed block b. Then the vectors j m^ and | myy are 
orthogonal for (l,i) ^ (l',i')- This is seen as follows: If i ^ i' then orthogonality follows 
from the fact that the incidence vectors m^ and m^/ have disjoint supports due to eq. @. 
If i = i 1 and I ^ I 1 then orthogonality follows from the fact that h/ is orthogonal to h//. 
This shows that each Bh is an orthogonal basis of C d . 

Now let us consider two different blocks b and b' . Then for arbitrary = 1, . . . , s and 
I, I' = 1, . . . , s there is exactly one pair (r, r') such that j r , j', are both 1, where supp(mfo) = 
{ji-, ■ ■ ■ ijs} and supp(mf/j/) = . . . ,j' s }. This is ensured by eq. ©• Therefore, we have 
for the scalar product of the embedded vectors 

(hi | m bi | h F | m 6 v ) = h t [r] ■ h;/[r'] . 

It is the product of two complex numbers of modulus one. This proves that the square 
norm of the scalar product of -^h^ j m^ and ^jfy/ T m&'i' is 1/s 2 . Consequently, the bases 
Bb and By are mutually unbiased for b ^ b' . □ 
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Example 4 (MUBs for d = 4) 

Let us apply our construction to the incidence vectors in Example 03 and the Hadamard 
matrix of size 2 



Then we obtain the following three mutually unbiased bases: 



Bi := 



B 2 := 



B 3 := 
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A^oie i/tat, as mentioned before, the construction is not optimal in this case. 



4 Construction of the incidence vectors 

The problem of finding a large collection of incidence vectors satisfying the conditions in 
eq. (jlj) and eq. is a well studied problem in design theory. We have already men- 
tioned that such a collection is equivalent to a net. There are many more objects that are 
equivalent: transversal designs, mutually orthogonal Latin squares, and orthogonal arrays 
[HI . We concentrate on the equivalence of mutually orthogonal Latin squares and 
nets. 



Mutually orthogonal Latin squares 

We refer the reader to [6ll?|lll|ll6| for an extensive introduction to Latin squares. A Latin 
square of order s is an s x s array with entries from a set S of cardinality s such that each 
element of S appears equally often in every row and every column. It is easily seen that a 
Latin square of order s exists for every positive integer s. For example, one may label the 
rows and columns by 0, 1, . . . , s — 1 and define the entry Lij in row i and column j to be 
i + j, where the addition is modulo s. The resulting Latin square for s = 4 is shown below: 

12 3 
12 3 

2 3 1 

3 12 
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Two Latin squares L and L' of order s are said to be orthogonal to each other if when one 
is superimposed on the other the ordered pairs (Ly,L^-) of corresponding entries consist 
of all possible s 2 pairs. A collection of w Latin squares of order s, any pair of which is 
orthogonal, is called a set of mutually orthogonal Latin squares (MOLS). We use Nmols(s) 
to denote the maximal value w such that there are w MOLS of order s. It is known that 
Nmols{ s ) < s ~ 1 f° r ah s. If this bound is attained we say that there is a complete set of 
mutually orthogonal Latin squares of order s. 

A construction for complete sets of MOLS of order s is known if s is a prime power |161 
Theorem 8.3]. No construction for a complete set of mutually orthogonal Latin squares for 
any other value is known at the present time. In fact, if s is not a prime power, the largest 
value of w for which it is known that there are w MOLS of order s is usually considerably 
smaller than s — 1, and for several values it is known that s — 1 MOLS of order s cannot 
exist. A table with the largest known values for w is presented in ""Q for s < 10000. In [H"] 
these numbers are shown for s < 100. 

Let us now summarize some known results on the number of MOLS of a given order. 
A result due to Wilson [B] on the existence of six MOLS shows that there are are w > 6 
MOLS for orders s with s > 76. Chowla, Erdos and Strauss .ll| proved the important 
fact that 

lim Nmols(s) = oo . 

They were even able to show that there is a number sq so that we have for all s > sq 

N(s) > I* 1 /* ( 8 ) 

Wilson [2S] improved this to Nmub(s) > s 1 ^ 17 , and Beth [H] obtained the exponent jjg. 
These proofs involve number-theoretic sieve methods. 

We have the following important equivalence (see |11[ Remark 2.10 and Theorem 2.12]: 

Fact 1 The existence of w mutually orthogonal Latin squares is equivalent to the existence 
of an (s, k)-net with k = w + 2. 

5 How good is the construction? 

Example |1] shows that our construction yields maximally three mutually orthogonal bases 
for dimension d = 2 2 because there are no w MOLS of order 2 with w > 1. The maximal 
value Nmub(^) is 5 because 4 is a prime power (use the optimal construction in [T%1 12*11 13*] 
for prime powers). 

More generally, it is clear that our construction can never beat the "prime power" 
construction for dimension of the form d = p 2e , where p is an arbitrary prime and e > 1. 
Our construction gives p e + 1 MUBs because there are p e — 1 MOLS of order p e , whereas 
the prime power construction yields p 2e + 1 MUBs. 
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The advantage of our construction is that it yields more MUBs for many square dimen- 
sions than the "reduce to prime power" construction. Let us characterize the cases in which 
it is better. 

Let d = s 2 be a square dimension, i.e., its prime power factorization has the form 

d = p\ e ^---p^, 

where the p^s are different primes and ej > for i = 1 . . . ,r. Then the "reduce to prime 
powers" gives n + 1 MUBs, where 



n : 

i=i 



min {p 2e *} ■ (9) 



To see if our construction yields more MUBs for the dimension d = s 2 we have to check if 

Nmols(s) + 2 > n + 1 (10) 

where n is the minimal prime power contained in s 2 (as given by eq. (©). The first s for 
which we know that this is true is s = 26. We have [111 Theorem 2.44 in Chapter II] 

Fact 2 N MO ls(26) > 4. 

Therefore, we can construct Nmols(26) + 2 > 6 MUBs in dimension d = 26 2 , whereas 
the "reduce to prime power" construction gives only 5 MUBs since 4 is the smallest prime 
power contained in d. 

More generally, let us consider the numbers 

M := {s 6 N | s = 2 mod 4} . 

For each s 6 M the minimal prime power contained in s is 2. Therefore, the "reduce to 
prime powers" construction gives only 5 MUBS in dimension d = s 2 . Due to Wilson's 
result we know that Nmols( s ) > 6 for all s > 76. Therefore, our construction gives at 
least 8 MUBs for dimensions d = s 2 for s > 76. This shows that there are infinitely many 
dimension in which our construction yields better results. 

It follows from our construction and the asymptotic result on the growth of mutually 
orthogonal Latin square that: 

Corollary 5 We have Nmub(s 2 ) > s 1//14 ' 8 for all s but finitely many exceptions. 

To determine the cases in which our construction is better one should consult Table 2.72 
in [111 Chapter II]. This table shows the best known lower bounds on Nmols( s ) f° r all 
s < 10 000. 

It is important that our construction can also be combined with the idea of the "reduce 
to prime power" construction. Instead of decomposing the dimension d into prime powers 
we may decompose it into squares and prime powers. This could be advantageous e.g. for 
numbers of the form d = s 2 p, where s 2 contains a small prime power and p is a prime number 
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that is relatively prime to s 2 and is larger than the best known lower bound on Nmub(s). 
Consider e.g. the dimension d = 26 2 • 7. Then the "reduce to prime powers" construction 
gives only 5 MUBs. We can construct 6 MUBs in dimension 26 2 with our construction and 
8 MUBs in dimension 7. Therefore, we obtain 6 MUBs in dimension d = 26 2 • 7. This shows 
that our construction has implications not only for square dimensions. 
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